Power Automate on JanBakker.tech

Send an email on a new Azure MFA method registration

Fri, 02 Jun 2023 09:50:08 +0000

I’ve done quite some Azure MFA projects over time (and counting), and as we mainly focus on the technical side, there are also practical sides to consider. Every project has its own approach and challenges, and more importantly: the user is impacted more or less, and that asks for some guidance.

License on-demand with Power Automate and Azure AD

Sun, 18 Oct 2020 15:49:41 +0000

Most organizations are using group-based licensing in Azure Active Directory. This is often integrated with the onboarding process of the users. But there are some use cases where you have some non-standard licenses attached to your tenant that you hand out on demand. You could still use group-based licensing, but users are added manually to the group.

Use Microsoft Graph Security for end-user notifications

Wed, 19 Aug 2020 13:11:23 +0000

In this short blog post, I want to show how you can use the Microsoft Graph Security to send alerts and notifications to your end-users. I also want to show you that it is super easy to set up. All you need is:

Bulk dismiss risky users with Power Automate or Logic Apps

Thu, 06 Aug 2020 07:48:02 +0000

Update 08-10-2020: Microsoft released an official connector for Azure AD Identity Protection. This would be much easier to use, since you don’t have to create a service principal to authenticate the custom connector. However, at the time of writing the official connector does not have the action to get all the risky users. Will keep an eye on things.

Prepopulate phone methods using a Custom Connector in Power Automate

Thu, 30 Jul 2020 07:30:00 +0000

This blog post shows the custom connector that is built on top of the Microsoft Graph API. With this connector, you can do bulk actions on Azure AD and provision phone numbers for your users. They can be used for MFA and SSPR. To understand how the connector works, please also read the first part of the blog where I explain the API in detail. In the second part, I have added a step-step-guide on how to create the custom connector and use it in an automation flow.

Prepopulate phone methods for MFA and SSPR using Graph API

Thu, 30 Jul 2020 07:29:00 +0000

Use Power Automate as your Conditional Access Police Department

Sat, 04 Jul 2020 07:10:42 +0000

Last week, I was working on a new blog for the Secure Score Series regarding global admin and break glass accounts. I came to the point where I was thinking of possible scenarios that could go wrong with these accounts. What if someone accidentally added these users to a certain group? What if that group would be triggered in some policy or maintenance tasks? A lot of these actions can be discovered using Microsoft Cloud App Security and Azure Monitor. This way, you will be alerted when someone touches the accounts in any way, or if the account is used to sign-in.

Use Power Automate or Logic Apps to keep an eye on your licenses

Sat, 27 Jun 2020 18:37:43 +0000

I guess we’ve all been there; you ran out of licenses in your Azure AD or Office 365 tenant. Despite you hang out in your admin portal every day, you were still taken by surprise when you discover an issue, caused by a license shortage. More often this is caused by the fact that the people who are responsible to buy these licenses, are not always IT admins. So it’s easy to run out of licenses. Time to get this fixed.

Use Power Automate for your custom "dynamic" groups

Wed, 01 Apr 2020 19:52:46 +0000

Azure AD Dynamic Groups#

Dynamic groups in Azure AD are awesome. I use them a lot. Dynamic groups can create groups based on attributes. For example, you can create a group that includes all the users from the Sales Team. The query for the group would look like this: